CVE-2015-4398

Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors involving processing confirmation delete pages.

Score

CVSS 2.0 5.8 Medium

Status

Modified - cve@mitre.org

Published

2015-06-16

Last modified

2024-08-06

Affected products

• Ctools (Chaos Tool Suite Project)

References

• http://www.openwall.com/lists/oss-security/2015/03/22/35
• http://www.openwall.com/lists/oss-security/2015/04/25/6
• http://www.securityfocus.com/bid/73224
• https://www.drupal.org/node/2454883
• https://www.drupal.org/node/2454885
• https://www.drupal.org/node/2454909